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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims 

1 1 . (Currently Amended) A method for generating a public key certificate of an end 
entity by a registration authority and an issuing authority in a public key infrastructure, 
comprising the steps of: 

generating, by the registration authority, a signatur e c e rtify cont e nts that ar e to be 
includ e d in the public k e y c e rtificat e , out of cont e nts regist e red with the registration authority; a 
signature to contents registered with the public key certificate; 

generating, by the registration authority, a certificate issuing request including the 
contents signed by the registration authority and the registration authority signature; 

sending the certificate issuing request from the registration authority to the issuing 

authority; and 

generating, by the issuing authority, the public key certificate including the 
contents signed by the registration authority, the registration authority signature, issuing contents 
issued by the issuing authority, and an issuing authority signatur e sign e d by th e issuing authority 
to c e rtify th e content s signed by th e r e gistration authority, the registration authority signatur e and 
issuing cont e nts issu e d bv th e issuing authority an issuing authority signature to the contents 
signed by the registration authority, the registration authority signature and issuing contents 
issued by the issuing authority . 
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12. (Previously Presented) A method as recited in claim 1 1, wherein 

the contents signed by the registration authority is a predetermined identifier to 
specify information to be certified by the pubic key certificate of the end entity. 

13. (Previously Presented) A method as recited in claim 1 1 , wherein 

the contents signed by the registration authority is a hash value calculated by 
applying a hash function to information to be certified by the public key certificate of the end 
entity. 

14. (Previously Presented) A method for as recited in claim 11, further 
comprising the steps of: 

verifying, by a verifying party, the issuing authority signature with the contents 
signed by the issuing authority; and 

verifying, by the verifying party, the registration authority signature with the 
contents signed by the registration authority included in the public key certificate. 

15. (Previously Presented) A method as recited in claim 12, further comprising 

the steps of: 

acquiring, by a verifying party, information signed by the registration authority 
according to the identifier in the public key certificate; 

calculating, by the verifying party, a hash value of the acquired information; 

decoding, by the verifying party, the registration authority signature included in 
the public key certificate, by using a public key of the registration authority; and 
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checking by the verifying party, whether the hash value is identical to the decoded 

value. 



16. (Previously Presented) A method as recited in claim 13, further comprising 

the steps of: 

calculating, by a verifying party, a hash value of the information signed by the 
registration authority in the public key certificate; 

decoding, by the verifying party, the registration authority signature included in 
the public key certificate, by using a public key of the registration authority; and 

checking by the verifying party, whether the hash value is identical to the decoded 

value. 



17. (Previously Presented) A method as recited in claim 14, further comprising 

the steps of: 

constructing and verifying, by the verifying party, a path from the certificate 
authority trusted by the verifying party, up to the public key certificate; 

verifying, by the verifying party, the registration authority signature described in 
the public key certificate using the public key of the registration authority; and 

constructing and verifying, by the verifying party, a path from the certificate 
authority trusted by the verifying party up to the public key certificate of the registration 
authority. 
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18. (Previously Presented) A method as recited in claim 17; wherein 

the verifying party obtains the public key certificate of the registration authority 
from a public key certificate database of the issuing authority according to the registration 
authority name described on the public key certificate. 

19. (Previously Presented) A method as recited in claim 17; wherein 

the verifying party obtains the public key certificate of the registration authority 
described in an extended region of the public key certificate to be verified. 

20. (Previously Presented) As method as recited in claim 1 1, further comprising 

the steps of: 

sending, by the registration authority, a certificate invalidation request to the 
issuing authority of the public key certificate of the registration authority; 

receiving, by the issuing authority, the certificate invalidation request; and 
invalidating, by the issuing authority, the public key certificate of the registration 

authority. 



